c61d17c938af9fb9c44243f2150f426bc27a96bf8476a1375f9d904dadb9b81e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-06_5b1b6af6aa7ce1bd4c7c2c4bebce7fd7_cryptolocker
Size

50KB
Sample

240906-m8246stdlh
MD5

5b1b6af6aa7ce1bd4c7c2c4bebce7fd7
SHA1

f42c78880e98cbf5dc1f54a7d2002d1d6b0ac645
SHA256

c61d17c938af9fb9c44243f2150f426bc27a96bf8476a1375f9d904dadb9b81e
SHA512

dcda7ffc9ab12887e6f955a12c3a3bd0fef37e638456d665cef4977b4bc41b357d535e2ed5b01cd0abbdc6dacd50c95f95f9cef4f3e04d5ed37f53790dc38a51
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatshU8:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7K

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-06_5b1b6af6aa7ce1bd4c7c2c4bebce7fd7_cryptolocker
- Size
  
  50KB
- MD5
  
  5b1b6af6aa7ce1bd4c7c2c4bebce7fd7
- SHA1
  
  f42c78880e98cbf5dc1f54a7d2002d1d6b0ac645
- SHA256
  
  c61d17c938af9fb9c44243f2150f426bc27a96bf8476a1375f9d904dadb9b81e
- SHA512
  
  dcda7ffc9ab12887e6f955a12c3a3bd0fef37e638456d665cef4977b4bc41b357d535e2ed5b01cd0abbdc6dacd50c95f95f9cef4f3e04d5ed37f53790dc38a51
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatshU8:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7K
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2